Identity Automation Engineer

The Identity Governance Administration Automation Engineer is responsible for administering, automating, and continuously improving the enterprise's Identity Governance and Administration (IGA) environment, with a focus on Saviynt. This role ensures that access certification, provisioning, and entitlement management processes are secure, auditable, and efficient across the enterprise and its Operating Companies (OpCos).

This role acts as both a platform administrator and an automation engineer, building and maintaining workflows that connect Saviynt to enterprise identity sources, target applications, and downstream systems. The engineer partners closely with Security, Infrastructure, Application, and Audit teams to ensure identity lifecycle events — joiner, mover, leaver, and access certification — are governed, automated, and evidenced consistently across on-premises, cloud, and hybrid environments.

The role is hands‑on and execution‑focused while embracing the Ralliant Business System (RBS) by embedding operational discipline, staff training, and continuous improvement into tools, workflows, and standard work so endpoint management is scalable, measurable, and repeatable. The role operates in service to the enterprise and operating companies, ensuring standardized identity governance practices while adapting to regional and business-specific needs. 

• Administer and support the Saviynt Identity Governance and Administration (IGA) platform, including application onboarding, connector configuration, and control library management.

• Design, build, and maintain automated identity lifecycle workflows (joiner, mover, leaver) across Active Directory, cloud directories, and business applications.

• Configure and enforce access certification campaigns, segregation of duties (SoD) controls, and role-based access (RBAC) policies to manage least-privilege access at scale.

• Develop and maintain Saviynt connectors and integrations using REST APIs, SCIM, and native connector frameworks to onboard new applications and OpCo environments.

• Develop PowerShell, Python, and REST API scripts and workflows to automate provisioning, deprovisioning, and entitlement reconciliation tasks.

• Troubleshoot and resolve provisioning, reconciliation, and workflow failures, including connector errors, data mismatches, and approval routing issues.

• Support authentication and authorization integrations across Active Directory/LDAP, SAML, OAuth 2.0, multi-factor authentication (MFA), and Single Sign-On (SSO) to ensure accurate identity data flows into governance processes.

• Monitor and analyze Saviynt, system, and integration logs, supporting SIEM integration, performance monitoring, and incident response for governance-related events.

• Apply identity governance best practices and support compliance with frameworks such as SOX, PCI-DSS, NIST, and ISO 27001, including audit evidence generation and reporting.

• Partner with Security, Infrastructure, Application, and Audit teams to integrate identity governance solutions across enterprise and OpCo environments.

• Document procedures, configurations, and control workflows, and train end users and control owners on certification and access request processes.

• Continuously improve governance workflows and dashboards, applying RBS principles to drive measurable reductions in manual effort and audit findings.

• Bachelor's degree recommended; equivalent experience considered.

• 10+ years of experience in identity governance, identity and access management, or systems administration, with 5+ years hands-on experience with Saviynt (Saviynt Enterprise Identity Cloud or Saviynt IGA) or relevant experience.

• Strong understanding of identity governance architecture, including access certification, role mining, SoD controls, and entitlement management.

• Proficiency in REST APIs, SCIM, and connector development for onboarding applications into an IGA platform, across on-premises and cloud environments (AWS, Azure, GCP).

• Experience with Active Directory/LDAP, SAML, OAuth 2.0, MFA, and SSO as identity sources feeding governance and provisioning workflows.

• Scripting experience in PowerShell and Python, with working knowledge of REST APIs and Saviynt SDKs/APIs.

• Working knowledge of JSON, including reading, structuring, and troubleshooting JSON payloads for connector configurations, API requests, and workflow integrations.

• Experience with log analysis and SIEM integration, incident response, and root cause analysis for governance and provisioning issues.

• Knowledge of compliance frameworks (SOX, PCI-DSS, NIST, ISO 27001) and zero trust security principles.

• Saviynt certification preferred; cloud platform or security certifications (AWS, Azure, GCP, CISSP, CISM, Security+) a plus.

• Strong communication and documentation skills, with the ability to explain technical concepts to non-technical stakeholders, control owners, and auditors.

• Ability to operate effectively across enterprise and OpCo environments, balancing global consistency with local context across multiple time zones and culture.

• Alignment with Ralliant values and the Ralliant Business System (RBS), including continuous improvement, transparency, and ownership.